A METHOD FOR FORWARDING BROADCAST PACKETS IN A BRIDGED IP NETWORK 



FIELD OF THE INVENTION 

The invention relates to bridged Internet Protocol (IP) networks or their functional 
equivalent and more particularly to a process for handling IP broadcast data packets which 
reduces or avoids broadcast storms which cause network instability by indiscriminate flooding 
the network with IP broadcast frames. 

BACKGROUND 

In medium to large size bridged IP networks hosts belonging to a substantial number of 
different subnets communicate with hosts belonging to their subnet. In most networks hosts 
belonging to the same subnet are typically connected to a small percentage of the total number of 
ports. This topology characteristic contributes to broadcast storms and/or network instability 
when IP broadcast frames are indiscriminately transmitted. Prior art networks have avoided this 
problem by configuring the network bridges in advance to direct IP broadcast frames to only 
those ports associated with the subnet address associated with the source host of the IP broadcast 
message. 

While this solution works to eliminate the problem described above, it introduces another 
which is just as burdensome. In order to be effective the prior art solution requires intervention 
by a network administrator or the like each time a host is added to the network or when a host is 
moved from one port to another. In other words the solution requires advance configuration 
before the network is established and more significantly reconfiguration each time a change in 
the network takes place. 

SUMMARY OF THE INVENTION 
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TMinvention contemplates a process for automatically generating a network subnet 
configuratiob by monitoring IP Address Resolution Protocol (ARP) frames on the network and 
building and maintaining a table including a list of learned subnets, the ports associated with 
each of the learned subnets and a mask associated with each learned subnet for identifying hosts 
belonging to the\ubnet. The process includes the steps set forth below: 

intercepting IP ARP frames; 

extracting the source and destination IP addresses from the IP ARP frame: 

examining the table of learned subnets to determine if the extracted IP addresses belong 
to one or more of the learned subnets; 

if neither IP address belongs to a learned subnet defining a new learned IP subnet address 
from the common elements in the prefix of the IP addresses, associating the port over which the 
ARP frame was received with the learned subnet and generating a mask which includes all of the 
common elements in the prefixes of both IP addresses; 

if only one IP address belongs to a learned subnet, examine the subnet mask and modify it 
if necessary to only include all the common elements in the prefix of both IP addresses and add 
the port over which the ARP frame was received to the port list associated with the learned IP 
subnet if it was not already in the list of associated ports; and, 

if the IP addresses belong to different learned subnets the learned subnets are combined to 
form a new learned subnet with a mask which includes both host IP addresses in the learned 
subnet and the port over which the IP ARP frame was received is added to the ports associated 
with the new learned subnet. 

BRIEF DESCRIPTION OF THE DRAWINGS 

Figure 1 is a block diagram of a network employing the invention; 
Figure 2 is a representation of the information developed by the invention for controlling 
the distribution of broadcast frames; 

Figure 3 is a flow chart illustrating the process used for generating the control 
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information; and, 

Figure 4 is a flow diagram of an optional process for splitting learned subnets to achieve 
greater network efficiency. 

DETAILED DESCRIPTION OF THE INVENTION 

IP addresses have a binary format ( xxxx xxxx . xxxx xxxx . xxxx xxxx . xxxx xxxx ). A 
typical binary address 1000 1 100 . 1 1 1 1 1 100 . 0000 0100 . 0000 0001 can also be expressed in 
decimal format (140 . 252 . 4 . 1). Both formats will be used in the description which follows. In 
some instances the IP address will be expressed in mixed format in order to improve clarity. 

IP address have a subnet and a host part. While the length of the IP address is fixed there 
are, however, no constraints on the length allocated to each individual part. Therefore, without 
advance information it is impossible to determine if two IP addresses are in the same subnet. 
Fortunately, in bridged IP networks, host systems communicate with other host systems only in 
the same subnet. If an ARP frame is received at a port, it is reasonable to assume that common 
prefix bits in both addresses include at a minimum the subnet portion of the IP address. It is 
possible that two hosts may have common prefix bits which extend beyond the actual subnet 
address. A learned subnet as used in the specification and claims differs from a subnet as used in 
the IP protocol since it can and generally will (except for a condition described below) include 
one or more bits of the IP address which are part of the host portion of the IP address. How the 
invention accommodates this discrepancy as more and more hosts belonging to the same subnet 
transmit IP ARP frames will be described below. 

A simplified IP bridged network is illustrated in Figure 1. The network includes a bridge 
10 having a number of ports Pl-Pn. Token Ring LAN's 12 and 14 are each connected to a 
different port P in the bridge 10. Two host systems A and B are connected to LAN's 12 and 14, 
respectively. While the description identifies Token Ring LAN's other equivalent networks will 
operate in the same manner. In the description which follows one of these hosts will transmit an 
ARP frame addressed to the other. In the first example, neither host IP address will be 
identifiable with an established learned subnet and the bridge will establish a learned subnet 



RAL9-1998-0012-US1 



3 



which includes all or part of their IP addresses. In the second example, Only one of the host IP 
addresses will be identifiable with an established learned subnet and the bridge will modify the 
previously established learned subnet to include the other host IP address. In a third example the 
source and detination host IP addresses of an ARP frame will be identifiable with different 
learned subnets and the bridge will combine the two different learned subnets into a single 
learned subnet which will be identifiable with the IP addresses of both hosts. And in a fourth 
example, an existing learned subnet will be split or reduced. 

Figure 2 illustrates the bridge memory contents for the learned subnet. Each learned 
subnet will have similar information stored in the memory. A first field labeled address includes 
that part of the IP address which are common to two or more host systems. A second field 
includes a mask which defines all of the common prefix bits in the IP addresses of hosts haying 
an IP address which conforms to the first field. A third field includes a list of ports associated 
with the learned subnet over which broadcast frames originating from hosts belonging to the 
same learned subnet are transmitted. And a fourth field includes data used for splitting or 
reducing the learned subnet. 

Th\ first three examples set forth below will follow the flow diagram illustrated in Fig 3 
hile the foVth will follow the flow diagram illustrated in Fig 4. In each example host A located 
on LAN 12 iathe source address of an ARP frame received at port P! and host B located on LAN 
14 is the destination address of the ARP frame transmitted by host A. 

If neither host A or B belong to any of the learned subnets in the bridge memory, the 
bridge will create the smallest IP subnet containing both hosts A and B as a new learned subnet. 
In this instance, the forwarding domain for this new subnet is port PI, the port over which the 
ARP frame was received. If the ARP frame had originated in host B, the forwarding domain 
would have been port Pn since this is the port host B is connected to. In all of the cases described 
below, the forwarding domain is extended to the port over which the ARP frame was received if 
that port is not already in the forwarding domain. 

In this example we will assume that the IP address of host A is 140.252.4.1 
(140.252.0000.0100.0000.0001) and the address of host B is 140.252.8.1 
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(140,252.0000.1000.0000.0001). The associated learned subnet created by the bridge is 
140.252.0.0 and the mask is 255.255.240.0(1111.1111.1111.1111.1111.0000.0000.0000). The 
common part of the prefix of the two IP addresses 140.252.0000 is set to all one's while the 
remainder of the mask (the non common part) is set to all zero's. At this time, the memory 
5 includes the subnet address 140.252.0.0, the mask 255.255.240.0 and the port PI in the 

forwarding domain field. This learned subnet will change over time as more ARP frames are 
received. How this takes place will become apparent from the description below of the remaining 
examples. 

In the second example we will assume that host A belongs to an existing subnet V 
10 (where V stands for a learned subnet stored in the memory of bridge 10 and has the format 

described above) and that host B does not belong to an existing learned subnet. We will consider 
the differences when the source of the ARP frame is host A or host B. In this exampe the bridge 
will modify the learned subnet V by expanding it to include host B. The expanded subnet VI is 

y i 

C 5 structured to include the IP address of host B as well as the IP addresses of the other hosts which 
15pi have contributed to the generation of the learned subnet V. The forwarding domain of the 
fi modified (or replacement) subnet VI is extended from that of subnet V so as to include the port 

s over which the ARP frame was received if that port was not previously included in the 

O 

p forwarding domain of learned subnet V. If host B was the source of the ARP frame, the 
^ forwarding domain of the subnet V is extended to include port Pn if port Pn was not already 
20 O included in the forwarding domain of the learned subnet. If host A was the source of the ARP 

frame, the forwarding domain of the subnet VI is extended to port PI if that port was not already 
included in the forwarding domain of the learned subnet. 

In this example we will assume that the learned subnet V is characterized by the address 
140.252.0.0 with a mask 255.255.248.0 (1111.1111.1111.1111.1111 .1000.0000.0000) and the IP 
25 addresses of hosts A and B are 140.252.4.1 (140.252.0000.0100.0000.0001) and 140.252.8.1 

(140,252.0000.1000.0000.0001), respectively. In this example host A belongs to learned subnet 
V and host B does not belong to any of the learned subnets. Since one of the hosts is sending an 
ARP frame to the other (it makes no difference which host initiated the ARP frame) it implies 
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that both hosts belong to the same subnet. In view of this all that is required in modifying subnet 
V is to modify the mask so that it includes both host A and B and extend the forwarding domain 
of the modified subnet VI to include the port of the source of the ARP frame if that port was not 
already included in the original subnet V. In order to accommodate both hosts A and B the mask 
of subnet V is changed to 255 .255.240.0 (1111.1111.1111.1111.1111 .0000.0000.0000). 

In a third example hosts A and B belong to different existing learned subnets Va and Vb, 
respectively. In this case the bridge creates a new subnet Vc which is the smallest superset of Va 
and Vb and deletes all of the other subnets that are contained in Vc. The forwarding domain of 
learned subnet Vc is the union of the forwarding domains of learned subnets Va and Vb and the 
port over which the ARP frame was received if that port is hot already included in one of the 
forwarding domains of learned subnets Va or Vb. Subnet Vc will serve as the associated subnet 
for the given ARP frame. 

M this example we will assume that the IP address of host A is 140.252.4.1 
(140.252M000.0100.0000.0001), that it belongs to learned subnet Va that is characterized by the 
address 14b.252.4.0 and the mask 255.255.252.0 (1111.1111. 1111. 1111. 1111. 1100.0000.0000). 
That the address of host B is 140.252.8.1 (140,252.0000.1000.0000.0001), that it belongs to 
learned sublet Vb that is characterized by the address 140.252.8.0 and the mask 255.255.248.0 
( 1 1 1 1 . 1 1 1 1 . l\l 1 . 1 1 1 1 . 1 1 1 1 . 1 000.0000.0000). Hosts A and B belong to different learned subnets 
(Va and Vb), hWever, since host A is sending an ARP frame to host B, it implies that tey are in 
the same subnerand that the learned subnets Va and Vb should be combined into a single learned 
subnet which accommodates both hosts and includes a forwarding domain which extends to all 
the different ports mcluded in subnets Va and Vb as well as the port over which the ARP frame 
was received if that wort was not previously included. In this example the nerged subnet Vc is 
characterized by the address 140.252.0.0 and the mask 255.255.248.0 
(1 1 1 1.1 1 1 1.1 1 1 1.1 1 1 l\y 1 1.1000.0000.0000) which includes host A and host B. 

If no other action is taken the learned subnets created by the method disclosed above will 
eventually gravitate to the actual subnets specified in the IP address. This will occur over time as 
hosts within an actual subnet transmit ARP frames that initiate mergers of learned subnets as 
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described in the third example above. 

However, in certain applications of the invention it may be desirable to split or reduce 
learned subnets as well as merge learned subnets. As learned subnets are merged, there is an 
increase in the forwarding domain of the learned subnet and a consequent increase in the number 
5 of ports included in the forwarding domain of the merged learned subnet. Under certain 

conditions (such as network configuration, host applications ) large learned subnets with large 

forwarding domains can result in reduced network efficiency. As illustrated in the third example, 
the learned subnet Vc has a smaller number of IP address prefix bits included in its mask in order 
to accommodate a larger number of host systems in the learned subnet and it also includes a 
10 larger forwarding domain (the sum of the ports included in Va and Vb). Mergers may at times 
occur as a result of transient traffic anomalies. However, once established they continue and 
^ impact network performance as described above. 

*B In a fourth example described below, a learned subnet will be split or reduced when a 

in 

j3 derived split potential for the learned subnet indicates that the learned subnet is a candidate for 
1 5 1! j spliting. In this example, hosts A and B belong to the same subnet V. The split or reduction will 
4= not take place until after the expiration of a split interval which starts with the creation of a 
J learned subnet and ends after a predetermined delay. The length of the interval is set to 
;Sf accommodate the characteristics of the network. As each ARP frame associated with a learned 
M 1 subnet is received, the bridge determines the split potential and replaces a previously determined 
20 o split potential if it is greater than the previously determined split potential. The split potential is 
w the difference in the length in bits between the current mask and the mask required to 
accommodate the hosts in the current ARP frame. 

In the example described below it will be assumed that the existing subnet V is 
characterized by the address 140.252.0.0 and has a mask 255.255.192.0 (1111 1111.1111 
25 1111.1100 0000.0000 0000). Both hosts A and B engaged in an ARP frame belong to subnet V. 
The address of host A is 140.252.4.1 (140.252.0000 0100.0000 0001) and the address of host B 
140.252.8.1 (140.252.0000 1000.0000 0001). 

The bridge will after receiving the ARP frame described above determine the split 
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potential for subnet V by identifying the common prefix bits in the addresses of hosts A and B. In 
this case there are 20 common prefix bits in the addresses of hosts A and B. A mask based on 
this value exceeds the length of the current mask for subnet V by two bits yielding a split 
potential value of two. If the value exceeds a previously determined split potential value it 
replaces the previously determined value. If a new value of the split potential exceeds a 
previously determined value, the characterizing address (140.252.0.0), the mask (255.255.240.0) 
and the port over which the ARP frame was received are stored in memory for future use. At the 
expiration of the split interval, the split potential is examined and if it exceeds zero the subnet V 
assumes the stored characterizing address and mask. At this time the forwarding domain of the 
subnet V is modified to include only the stored port over which the ARP frame used to determine 
the split potential was received. 

While one basis for splitting or reducing a subnet has been described in detail it will be 
obvious to those skilled in this art that other network operational factors can be used or included 
in the determination of the split potential value. In addition, the reduction in the number of ports 
included in the reduced subnet can be enlarged to take into account past performance in network 
traffic. 

While the invention is susceptible to various modifications and alternative forms, specific 
embodiments have been shown in detail by way of example. It should be obvious to those skilled 
in the art to which the invention pertains that the invention is not limited to the specific 
embodiments descried and illustrated, but on the contrary, the invention is intended to cover all 
alternatives, modifications and equivalents falling within the spirit and scope of the invention as 
defined by the claims. 



RAL9-1998-0012-US1 



8 



